/*
- * emu main
+ * qemu main
*
* Copyright (c) 2003 Fabrice Bellard
*
#include <stdlib.h>
#include <stdio.h>
#include <stdarg.h>
+#include <string.h>
#include <errno.h>
+#include <unistd.h>
-#include "gemu.h"
+#include "qemu.h"
-#include "i386/hsw_interp.h"
+#include "cpu-i386.h"
-unsigned long x86_stack_size;
-unsigned long stktop;
+#define DEBUG_LOGFILE "/tmp/qemu.log"
-void gemu_log(const char *fmt, ...)
-{
- va_list ap;
-
- va_start(ap, fmt);
- vfprintf(stderr, fmt, ap);
- va_end(ap);
-}
-
-/* virtual x86 CPU stuff */
-
-extern int invoke_code16(Interp_ENV *, int, int);
-extern int invoke_code32(Interp_ENV *, int);
-extern char *e_print_cpuemu_regs(ENVPARAMS, int is32);
-extern char *e_emu_disasm(ENVPARAMS, unsigned char *org, int is32);
-extern void init_npu(void);
-
-Interp_ENV env_global;
-Interp_ENV *envp_global;
-
-QWORD EMUtime = 0;
-
-int CEmuStat = 0;
-
-long instr_count;
+FILE *logfile = NULL;
+int loglevel;
+static const char *interp_prefix = CONFIG_QEMU_PREFIX;
-/* who will initialize this? */
-unsigned long io_bitmap[IO_BITMAP_SIZE+1];
+#ifdef __i386__
+/* Force usage of an ELF interpreter even if it is an ELF shared
+ object ! */
+const char interp[] __attribute__((section(".interp"))) = "/lib/ld-linux.so.2";
-/* debug flag, 0=disable 1..9=level */
-int d_emu = 0;
-
-unsigned long CRs[5] =
-{
- 0x00000013, /* valid bits: 0xe005003f */
- 0x00000000, /* invalid */
- 0x00000000,
- 0x00000000,
- 0x00000000
-};
-
-/*
- * DR0-3 = linear address of breakpoint 0-3
- * DR4=5 = reserved
- * DR6 b0-b3 = BP active
- * b13 = BD
- * b14 = BS
- * b15 = BT
- * DR7 b0-b1 = G:L bp#0
- * b2-b3 = G:L bp#1
- * b4-b5 = G:L bp#2
- * b6-b7 = G:L bp#3
- * b8-b9 = GE:LE
- * b13 = GD
- * b16-19= LLRW bp#0 LL=00(1),01(2),11(4)
- * b20-23= LLRW bp#1 RW=00(x),01(w),11(rw)
- * b24-27= LLRW bp#2
- * b28-31= LLRW bp#3
- */
-unsigned long DRs[8] =
-{
- 0x00000000,
- 0x00000000,
- 0x00000000,
- 0x00000000,
- 0xffff1ff0,
- 0x00000400,
- 0xffff1ff0,
- 0x00000400
-};
-
-unsigned long TRs[2] =
-{
- 0x00000000,
- 0x00000000
-};
-
-void FatalAppExit(UINT wAction, LPCSTR lpText)
-{
- fprintf(stderr, "Fatal error '%s' in CPU\n", lpText);
- exit(1);
-}
-
-int e_debug_check(unsigned char *PC)
-{
- register unsigned long d7 = DRs[7];
-
- if (d7&0x03) {
- if (d7&0x30000) return 0; /* only execute(00) bkp */
- if ((long)PC==DRs[0]) {
- e_printf("DBRK: DR0 hit at %p\n",PC);
- DRs[6] |= 1;
- return 1;
- }
- }
- if (d7&0x0c) {
- if (d7&0x300000) return 0;
- if ((long)PC==DRs[1]) {
- e_printf("DBRK: DR1 hit at %p\n",PC);
- DRs[6] |= 2;
- return 1;
- }
- }
- if (d7&0x30) {
- if (d7&0x3000000) return 0;
- if ((long)PC==DRs[2]) {
- e_printf("DBRK: DR2 hit at %p\n",PC);
- DRs[6] |= 4;
- return 1;
- }
- }
- if (d7&0xc0) {
- if (d7&0x30000000) return 0;
- if ((long)PC==DRs[3]) {
- e_printf("DBRK: DR3 hit at %p\n",PC);
- DRs[6] |= 8;
- return 1;
- }
- }
- return 0;
-}
+/* for recent libc, we add these dummies symbol which are not declared
+ when generating a linked object (bug in ld ?) */
+#if __GLIBC__ > 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ >= 3)
+long __init_array_start[0];
+long __init_array_end[0];
+long __fini_array_start[0];
+long __fini_array_end[0];
+#endif
-/* Debug stuff */
-void logstr(unsigned long mask, const char *fmt,...)
-{
- va_list ap;
+#endif
- va_start(ap, fmt);
- vfprintf(stderr, fmt, ap);
- va_end(ap);
-}
+/* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
+ we allocate a bigger stack. Need a better solution, for example
+ by remapping the process stack directly at the right place */
+unsigned long x86_stack_size = 512 * 1024;
-/* unconditional message into debug log and stderr */
-#undef error
-void error(const char *fmt, ...)
+void gemu_log(const char *fmt, ...)
{
va_list ap;
va_start(ap, fmt);
vfprintf(stderr, fmt, ap);
va_end(ap);
- exit(1);
-}
-
-int PortIO(DWORD port, DWORD value, UINT size, BOOL is_write)
-{
- fprintf(stderr, "IO: %s port=0x%lx value=0x%lx size=%d",
- is_write ? "write" : "read", port, value, size);
- return value;
-}
-
-void LogProcName(WORD wSel, WORD wOff, WORD wAction)
-{
-
-}
-
-void INT_handler(int num, void *env)
-{
- fprintf(stderr, "EM86: int %d\n", num);
}
/***********************************************************/
-/* new CPU core */
+/* CPUX86 core interface */
-void cpu_x86_outb(int addr, int val)
+void cpu_x86_outb(CPUX86State *env, int addr, int val)
{
fprintf(stderr, "outb: port=0x%04x, data=%02x\n", addr, val);
}
-void cpu_x86_outw(int addr, int val)
+void cpu_x86_outw(CPUX86State *env, int addr, int val)
{
fprintf(stderr, "outw: port=0x%04x, data=%04x\n", addr, val);
}
-void cpu_x86_outl(int addr, int val)
+void cpu_x86_outl(CPUX86State *env, int addr, int val)
{
fprintf(stderr, "outl: port=0x%04x, data=%08x\n", addr, val);
}
-int cpu_x86_inb(int addr)
+int cpu_x86_inb(CPUX86State *env, int addr)
{
fprintf(stderr, "inb: port=0x%04x\n", addr);
return 0;
}
-int cpu_x86_inw(int addr)
+int cpu_x86_inw(CPUX86State *env, int addr)
{
fprintf(stderr, "inw: port=0x%04x\n", addr);
return 0;
}
-int cpu_x86_inl(int addr)
+int cpu_x86_inl(CPUX86State *env, int addr)
{
fprintf(stderr, "inl: port=0x%04x\n", addr);
return 0;
}
+void write_dt(void *ptr, unsigned long addr, unsigned long limit,
+ int seg32_bit)
+{
+ unsigned int e1, e2, limit_in_pages;
+ limit_in_pages = 0;
+ if (limit > 0xffff) {
+ limit = limit >> 12;
+ limit_in_pages = 1;
+ }
+ e1 = (addr << 16) | (limit & 0xffff);
+ e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
+ e2 |= limit_in_pages << 23; /* byte granularity */
+ e2 |= seg32_bit << 22; /* 32 bit segment */
+ stl((uint8_t *)ptr, e1);
+ stl((uint8_t *)ptr + 4, e2);
+}
+
+uint64_t gdt_table[6];
-/* XXX: currently we use LDT entries */
-#define __USER_CS (0x23|4)
-#define __USER_DS (0x2B|4)
+void cpu_loop(CPUX86State *env)
+{
+ int trapnr;
+ uint8_t *pc;
+ target_siginfo_t info;
+
+ for(;;) {
+ trapnr = cpu_x86_exec(env);
+ switch(trapnr) {
+ case EXCP0D_GPF:
+ if (env->eflags & VM_MASK) {
+ handle_vm86_fault(env);
+ } else {
+ pc = env->seg_cache[R_CS].base + env->eip;
+ if (pc[0] == 0xcd && pc[1] == 0x80) {
+ /* syscall */
+ env->eip += 2;
+ env->regs[R_EAX] = do_syscall(env,
+ env->regs[R_EAX],
+ env->regs[R_EBX],
+ env->regs[R_ECX],
+ env->regs[R_EDX],
+ env->regs[R_ESI],
+ env->regs[R_EDI],
+ env->regs[R_EBP]);
+ } else {
+ /* XXX: more precise info */
+ info.si_signo = SIGSEGV;
+ info.si_errno = 0;
+ info.si_code = TARGET_SI_KERNEL;
+ info._sifields._sigfault._addr = 0;
+ queue_signal(info.si_signo, &info);
+ }
+ }
+ break;
+ case EXCP0E_PAGE:
+ info.si_signo = SIGSEGV;
+ info.si_errno = 0;
+ if (!(env->error_code & 1))
+ info.si_code = TARGET_SEGV_MAPERR;
+ else
+ info.si_code = TARGET_SEGV_ACCERR;
+ info._sifields._sigfault._addr = env->cr2;
+ queue_signal(info.si_signo, &info);
+ break;
+ case EXCP00_DIVZ:
+ if (env->eflags & VM_MASK) {
+ handle_vm86_trap(env, trapnr);
+ } else {
+ /* division by zero */
+ info.si_signo = SIGFPE;
+ info.si_errno = 0;
+ info.si_code = TARGET_FPE_INTDIV;
+ info._sifields._sigfault._addr = env->eip;
+ queue_signal(info.si_signo, &info);
+ }
+ break;
+ case EXCP01_SSTP:
+ case EXCP03_INT3:
+ if (env->eflags & VM_MASK) {
+ handle_vm86_trap(env, trapnr);
+ } else {
+ info.si_signo = SIGTRAP;
+ info.si_errno = 0;
+ if (trapnr == EXCP01_SSTP) {
+ info.si_code = TARGET_TRAP_BRKPT;
+ info._sifields._sigfault._addr = env->eip;
+ } else {
+ info.si_code = TARGET_SI_KERNEL;
+ info._sifields._sigfault._addr = 0;
+ }
+ queue_signal(info.si_signo, &info);
+ }
+ break;
+ case EXCP04_INTO:
+ case EXCP05_BOUND:
+ if (env->eflags & VM_MASK) {
+ handle_vm86_trap(env, trapnr);
+ } else {
+ info.si_signo = SIGSEGV;
+ info.si_errno = 0;
+ info.si_code = TARGET_SI_KERNEL;
+ info._sifields._sigfault._addr = 0;
+ queue_signal(info.si_signo, &info);
+ }
+ break;
+ case EXCP06_ILLOP:
+ info.si_signo = SIGILL;
+ info.si_errno = 0;
+ info.si_code = TARGET_ILL_ILLOPN;
+ info._sifields._sigfault._addr = env->eip;
+ queue_signal(info.si_signo, &info);
+ break;
+ case EXCP_INTERRUPT:
+ /* just indicate that signals should be handled asap */
+ break;
+ default:
+ pc = env->seg_cache[R_CS].base + env->eip;
+ fprintf(stderr, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n",
+ (long)pc, trapnr);
+ abort();
+ }
+ process_pending_signals(env);
+ }
+}
void usage(void)
{
- printf("gemu version 0.1, Copyright (c) 2003 Fabrice Bellard\n"
- "usage: gemu program [arguments...]\n"
+ printf("qemu version " QEMU_VERSION ", Copyright (c) 2003 Fabrice Bellard\n"
+ "usage: qemu [-h] [-d] [-L path] [-s size] program [arguments...]\n"
"Linux x86 emulator\n"
- );
- exit(1);
+ "\n"
+ "-h print this help\n"
+ "-L path set the x86 elf interpreter prefix (default=%s)\n"
+ "-s size set the x86 stack size in bytes (default=%ld)\n"
+ "\n"
+ "debug options:\n"
+ "-d activate log (logfile=%s)\n"
+ "-p pagesize set the host page size to 'pagesize'\n",
+ interp_prefix,
+ x86_stack_size,
+ DEBUG_LOGFILE);
+ _exit(1);
}
+/* XXX: currently only used for async signals (see signal.c) */
+CPUX86State *global_env;
+/* used to free thread contexts */
+TaskState *first_task_state;
+
int main(int argc, char **argv)
{
const char *filename;
struct target_pt_regs regs1, *regs = ®s1;
struct image_info info1, *info = &info1;
- Interp_ENV *env;
-
+ TaskState ts1, *ts = &ts1;
+ CPUX86State *env;
+ int optind;
+ const char *r;
+
if (argc <= 1)
usage();
-
- filename = argv[1];
+
+ loglevel = 0;
+ optind = 1;
+ for(;;) {
+ if (optind >= argc)
+ break;
+ r = argv[optind];
+ if (r[0] != '-')
+ break;
+ optind++;
+ r++;
+ if (!strcmp(r, "-")) {
+ break;
+ } else if (!strcmp(r, "d")) {
+ loglevel = 1;
+ } else if (!strcmp(r, "s")) {
+ r = argv[optind++];
+ x86_stack_size = strtol(r, (char **)&r, 0);
+ if (x86_stack_size <= 0)
+ usage();
+ if (*r == 'M')
+ x86_stack_size *= 1024 * 1024;
+ else if (*r == 'k' || *r == 'K')
+ x86_stack_size *= 1024;
+ } else if (!strcmp(r, "L")) {
+ interp_prefix = argv[optind++];
+ } else if (!strcmp(r, "p")) {
+ host_page_size = atoi(argv[optind++]);
+ if (host_page_size == 0 ||
+ (host_page_size & (host_page_size - 1)) != 0) {
+ fprintf(stderr, "page size must be a power of two\n");
+ exit(1);
+ }
+ } else {
+ usage();
+ }
+ }
+ if (optind >= argc)
+ usage();
+ filename = argv[optind];
+
+ /* init debug */
+ if (loglevel) {
+ logfile = fopen(DEBUG_LOGFILE, "w");
+ if (!logfile) {
+ perror(DEBUG_LOGFILE);
+ _exit(1);
+ }
+ setvbuf(logfile, NULL, _IOLBF, 0);
+ }
/* Zero out regs */
memset(regs, 0, sizeof(struct target_pt_regs));
/* Zero out image_info */
memset(info, 0, sizeof(struct image_info));
- if(elf_exec(filename, argv+1, environ, regs, info) != 0) {
+ /* Scan interp_prefix dir for replacement files. */
+ init_paths(interp_prefix);
+
+ /* NOTE: we need to init the CPU at this stage to get the
+ host_page_size */
+ env = cpu_x86_init();
+
+ if (elf_exec(filename, argv+optind, environ, regs, info) != 0) {
printf("Error loading %s\n", filename);
- exit(1);
+ _exit(1);
}
-#if 0
- printf("start_brk 0x%08lx\n" , info->start_brk);
- printf("end_code 0x%08lx\n" , info->end_code);
- printf("start_code 0x%08lx\n" , info->start_code);
- printf("end_data 0x%08lx\n" , info->end_data);
- printf("start_stack 0x%08lx\n" , info->start_stack);
- printf("brk 0x%08lx\n" , info->brk);
- printf("esp 0x%08lx\n" , regs->esp);
- printf("eip 0x%08lx\n" , regs->eip);
-#endif
+ if (loglevel) {
+ page_dump(logfile);
+
+ fprintf(logfile, "start_brk 0x%08lx\n" , info->start_brk);
+ fprintf(logfile, "end_code 0x%08lx\n" , info->end_code);
+ fprintf(logfile, "start_code 0x%08lx\n" , info->start_code);
+ fprintf(logfile, "end_data 0x%08lx\n" , info->end_data);
+ fprintf(logfile, "start_stack 0x%08lx\n" , info->start_stack);
+ fprintf(logfile, "brk 0x%08lx\n" , info->brk);
+ fprintf(logfile, "esp 0x%08lx\n" , regs->esp);
+ fprintf(logfile, "eip 0x%08lx\n" , regs->eip);
+ }
target_set_brk((char *)info->brk);
syscall_init();
+ signal_init();
- env = &env_global;
- envp_global = env;
- memset(env, 0, sizeof(Interp_ENV));
-
- env->rax.e = regs->eax;
- env->rbx.e = regs->ebx;
- env->rcx.e = regs->ecx;
- env->rdx.e = regs->edx;
- env->rsi.esi = regs->esi;
- env->rdi.edi = regs->edi;
- env->rbp.ebp = regs->ebp;
- env->rsp.esp = regs->esp;
- env->cs.cs = __USER_CS;
- env->ds.ds = __USER_DS;
- env->es.es = __USER_DS;
- env->ss.ss = __USER_DS;
- env->fs.fs = __USER_DS;
- env->gs.gs = __USER_DS;
- env->trans_addr = regs->eip;
-
- LDT[__USER_CS >> 3].w86Flags = DF_PRESENT | DF_PAGES | DF_32;
- LDT[__USER_CS >> 3].dwSelLimit = 0xfffff;
- LDT[__USER_CS >> 3].lpSelBase = NULL;
-
- LDT[__USER_DS >> 3].w86Flags = DF_PRESENT | DF_PAGES | DF_32;
- LDT[__USER_DS >> 3].dwSelLimit = 0xfffff;
- LDT[__USER_DS >> 3].lpSelBase = NULL;
- init_npu();
- build_decode_tables();
-
- for(;;) {
- int err;
- uint8_t *pc;
+ global_env = env;
- err = invoke_code32(env, -1);
- env->trans_addr = env->return_addr;
- pc = env->seg_regs[0] + env->trans_addr;
- switch(err) {
- case EXCP0D_GPF:
- if (pc[0] == 0xcd && pc[1] == 0x80) {
- /* syscall */
- env->trans_addr += 2;
- env->rax.e = do_syscall(env->rax.e,
- env->rbx.e,
- env->rcx.e,
- env->rdx.e,
- env->rsi.esi,
- env->rdi.edi,
- env->rbp.ebp);
- } else {
- goto trap_error;
- }
- break;
- default:
- trap_error:
- fprintf(stderr, "GEMU: Unknown error %d, aborting\n", err);
-#ifndef NO_TRACE_MSGS
- d_emu = 9;
- fprintf(stderr, "%s\n%s\n",
- e_print_cpuemu_regs(env, 1),
- e_emu_disasm(env,pc,1));
-#endif
- abort();
- }
- }
+ /* build Task State */
+ memset(ts, 0, sizeof(TaskState));
+ env->opaque = ts;
+ ts->used = 1;
+
+ /* linux register setup */
+ env->regs[R_EAX] = regs->eax;
+ env->regs[R_EBX] = regs->ebx;
+ env->regs[R_ECX] = regs->ecx;
+ env->regs[R_EDX] = regs->edx;
+ env->regs[R_ESI] = regs->esi;
+ env->regs[R_EDI] = regs->edi;
+ env->regs[R_EBP] = regs->ebp;
+ env->regs[R_ESP] = regs->esp;
+ env->eip = regs->eip;
+
+ /* linux segment setup */
+ env->gdt.base = (void *)gdt_table;
+ env->gdt.limit = sizeof(gdt_table) - 1;
+ write_dt(&gdt_table[__USER_CS >> 3], 0, 0xffffffff, 1);
+ write_dt(&gdt_table[__USER_DS >> 3], 0, 0xffffffff, 1);
+ cpu_x86_load_seg(env, R_CS, __USER_CS);
+ cpu_x86_load_seg(env, R_DS, __USER_DS);
+ cpu_x86_load_seg(env, R_ES, __USER_DS);
+ cpu_x86_load_seg(env, R_SS, __USER_DS);
+ cpu_x86_load_seg(env, R_FS, __USER_DS);
+ cpu_x86_load_seg(env, R_GS, __USER_DS);
+
+ cpu_loop(env);
+ /* never exits */
return 0;
}